{"text_format":"3","workbook":"xlsx","n_sheets":9,"sheets":["Beginning","Cover","Index","Workshop logistics","Assessment Tables","Inherent Risk Register","Inherent vs Residual graph","Summary","Top 10"],"not_rendered":{"charts":1,"images":3,"macros":1,"defined_names":35},"read":"whole","date_system":"1900"}

{"sheet":"Beginning","index":0,"n_rows":9,"n_cols":9,"rows_kept":9,"merged":[[8,2,8,3],[8,5,8,6],[8,8,8,9]]}
[{"$nulls":6},"Company Name"]
[{"$nulls":6},"Enterprise Risk Management"]
[{"$nulls":6},"Overall Risk Assessment"]
[{"$nulls":6},"Risk register as at Date"]
[]
[]
[]
[]
[null,null,"Administration",null,null,"Risk Assessment",null,null,"Reporting"]

{"sheet":"Cover","index":1,"n_rows":29,"n_cols":14,"rows_kept":29,"merged":[[27,13,27,15]]}
{"$rows_empty":10}
[{"$nulls":8},{"$f":"Beginning!G1","v":"Company Name"}]
[]
[{"$nulls":8},{"$f":"Beginning!G2","v":"Enterprise Risk Management"}]
[]
[{"$nulls":8},{"$f":"Beginning!G3","v":"Overall Risk Assessment"}]
[]
[{"$nulls":8},{"$f":"Beginning!G4","v":"Risk register as at Date"}]
{"$rows_empty":10}
[null,null,"Process owner",{"$nulls":10},"Date"]
[null,null,"Accepted by",{"$nulls":10},"Date"]

{"sheet":"Index","index":2,"n_rows":19,"n_cols":4,"rows_kept":19,"merged":[[1,0,1,1],[2,0,2,1],[3,0,3,1],[4,0,4,1]]}
[]
[{"$f":"Beginning!$G$1","v":"Company Name"}]
[{"$f":"Beginning!$G$2","v":"Enterprise Risk Management"}]
[{"$f":"Beginning!$G$3","v":"Overall Risk Assessment"}]
[{"$f":"Beginning!$G$4","v":"Risk register as at Date"}]
[]
["Index"]
[]
[1,"Workshop Logistics"]
[{"$nulls":3}," "]
[{"$f":"+A9+1","v":2},"Risk areas & risk examples"]
[]
[{"$f":"+A11+1","v":3},"Risk Register"]
[]
[{"$f":"+A13+1","v":4},"Assessment Tables (inherent risk and control effectiveness)"]
[]
[{"$f":"+A15+1","v":5},"Inherent versus Residual Risk Graph"]
[]
[6,"Risk Register Summary"]

{"sheet":"Workshop logistics","index":3,"n_rows":43,"n_cols":18,"rows_kept":43}
[]
[{"$f":"Beginning!G1","v":"Company Name"}]
[{"$f":"Beginning!G2","v":"Enterprise Risk Management"}]
["Overall Risk Assessment"]
[]
[]
["Workshop dates"]
[1,"2010-07-26"]
[{"$nulls":17},"n Current control sufficient\n"]
[{"$nulls":17},"n Current control sufficient\n"]
[{"$nulls":17},"n Current control sufficient\n"]
[]
[]
[{"$nulls":17},"n Current control sufficient\n"]
["No","Attendees","Workshop","Position",null,"email address",{"$nulls":11},"n Current control sufficient\n"]
[1,{"$nulls":16},"n Current control sufficient\n"]
[2,{"$nulls":16},"n Current control sufficient\n"]
[3,{"$nulls":16},"n Current control sufficient\n"]
[4,{"$nulls":16},"n Current control sufficient\n"]
[5,{"$nulls":16},"n Current control sufficient\n"]
[6]
[7]
[8,{"$nulls":16},"n Current control sufficient\n"]
[9]
[10,{"$nulls":16},"n Current control sufficient\n"]
[11,{"$nulls":16},"n Current control sufficient\n"]
[12,{"$nulls":16},"n Current control sufficient\n"]
[13,{"$nulls":16},"n Current control sufficient\n"]
[14,{"$nulls":16},"n Management to drive the project to\n      document processes within the\n      department to ensure continuity of \n      projects if staff leave the employ of\n      the company"]
[15,{"$nulls":16},"n Documented processes in \n      conjunction with formalised project \n      management to assist in service\n      delivery\nn Management to drive the \n      documentation for repeatable \n      Processes which details the project \n      plan, associated tasks and\n      templates\n"]
[16,{"$nulls":16},"n Current control sufficient\n"]
[17]
[18]
[19]
[20]
[21]
[22]
[23]
[24]
[25]
[26]
[27]
[28]

{"sheet":"Assessment Tables","index":4,"n_rows":100,"n_cols":6,"rows_kept":100,"merged":[[6,0,6,4],[8,0,8,5],[9,0,9,5],[28,0,28,3],[29,0,29,3],[30,1,30,2],[31,1,31,2],[32,1,32,2],[33,1,33,2],[34,1,34,2],[35,1,35,2],[37,0,37,5],[38,0,38,5],[39,1,39,2],[40,1,40,2],[41,1,41,2],[42,1,42,2],[43,1,43,2],[44,1,44,2],[46,0,46,2],[46,3,46,5],[47,0,47,2],[47,3,47,5]]}
[{"$f":"Beginning!$G$1","v":"Company Name"}]
[{"$f":"Beginning!$G$2","v":"Enterprise Risk Management"}]
[{"$f":"Beginning!$G$3","v":"Overall Risk Assessment"}]
[{"$f":"Beginning!$G$4","v":"Risk register as at Date"}]
["Assessment tables"]
[]
["Each risk is evaluated in terms of potential Impact, likelihood of occurrence and the effectiveness of controls in place to manage the risks according to the criteria set out below"]
[]
["Assessment of Potential Impact (severity)"]
["The table below is to be used to assist management in quantifying the potential impact that the occurrence of specific risks may have on the Organisation"]
[null,"Minor","Important","Serious","Critical","Catastrophic"]
[null,10,20,40,60,100]
["General","Consequences can be readily absorbed under normal operating conditions","Event which can be managed under normal operating conditions.","Major events which can be managed but requires additional resources and management effort","Critical event which can be endured but which may over a period  have a negative impact and extensive consequences.","Disaster with potential to lead to collapse of business and is fundamental to the achievement of objectives."]
["Continuity of supply","No impact on business or core systems","Brief local inconvenience (work around possible)\nLoss of an asset with minor impact on operations","Reduction in supply or disruption for a period between 8 & 47 hours over a regional area","Reduction in supply or disruption for a period ranging between 24 & 48 hours over a significant area (nationally)","Risk event will result in widespread and lengthy reduction in continuity of supply to customers of greater than 48 hours"]
["Compliance - Reprimand from Government","None","Enquiry","Caution","Non-public reprimand","Public reprimand"]
["Compliance - Fines, Penalties, Sanctions ","None","Minor","Moderate","Material","Severe"]
["Compliance - Loss of operating licence/ authorisation ","None","Enquiry","Caution","Reversible","Loss for extended period"]
["Reputation / Brand","Public concern restricted to local complaints","Minor adverse local/ public / media attention and complaints","Local attention from media / NGO / public","Significant adverse public / media outcry","International multi NGO and prolonged media / international condemnation "]
["Environment","Minor effects extending beyond boundaries of installation (no press)","Moderate reversible short term impact at local level (local press)","Serious but reversible short / long term impact at Regional level","Serious National reversible impact (national press)","Irreversible impact at Global or National scale (national or international press)"]
["OHS (injury / death)","Med treatment/ restricted workday case","Little environmental, safety or health impacts\nLost time injuries but no fatalities","Lower level environmental, safety or health impacts. \nMore than one fatality","Significant injury of personnel or public\nUp to 10 fatalities","Serious injury (permanent disability) or death of personnel or members of the public\nMore than 10 fatalities"]
["Government / stakeholder relations","Minimal","Low","Major / Serious","Very significant","Critical – complete breakdown"]
["Legal compliance","Reportable incident","Reportable fines","Severe reportable fines. \nProvisional loss of operating permit","Loss of operating permit, reversible","Significant business interruption"]
["Human Resources","Complaints / Dissatisfaction amongst the workforce. Issues raised at divisional / operational meetings","Grievances, Go slow","Disputes / Marches / Organised stay-away.\nStrike at one facility","Strikes at several facilities","Strike action affecting all operations"]
["Operating","Minor / superficial damage to equipment. No loss of operating income","Moderate damage to equipment and / or facility. Loss of operation < 1 week","Major damage to facility. Loss of operations < 1months","Future operations at site seriously affected. Loss of operations > 1 months","Total loss of production"]
["Financial","Insignificant financial loss\nMinor impact on revenue, assets base and share price","Moderate impact on revenue, assets base and share price","Major cost overruns between 10 % and 20 % over budget\nAffect on revenue / asset base between 5% and 10%\nAffect on group profit before tax between 3% and 6%","Significant cost overruns of >20% over budget\nAffect on revenue / asset base of >10%\nAffect on group profit before tax of >7%","Significant cost overruns of >30% over budget\nAffect on revenue / asset base of >15%\nAffect on group profit before tax of >10%"]
["IT","IT functionality / availability minimally affected at operations","IT functionality / availability moderately affected at one operation","Significant loss of IT functionality / availability across Division/Group","Major loss of IT functionality / availability across Division/Group","Total loss of IT functionality / availability / across Division/Group"]
["Technical Complexity","Use of unproven or emerging technology for non-critical systems / project components","Use of unproven or emerging technology for systems / project components","Use of unproven or emerging technology for critical systems / project components","Use of new technology not previously utilised by Transnet for critical systems / project components","Use of unproven technology for critical system / project components \nHigh level of technical interdependencies between system / project components"]
[]
["Assessment of Probability (likelihood)"]
["The table below is to be used to assist management in quantifying the probability of a specific risk occurring."]
["Probability Factor","Qualification Criteria",null,"Rating"]
["Almost Certain","The risk is almost certain to occur in the current circumstances ",null,{"v":0.9,"d":"90%"}]
["Likely","More than an even chance of occurring",null,{"v":0.6,"d":"60%"}]
["Possible","Could occur quite often",null,{"v":0.3,"d":"30%"}]
["Unlikely","Small likelihood but could happen",null,{"v":0.15,"d":"15%"}]
["Rare","Not expected to happen - Event would be a surprise",null,{"v":0.075,"d":"7.5%"}]
[]
["Assessment of Control Effectiveness"]
["The table below is to be used to assist management in quantifying the perceived effectiveness of controls to mitigate or reduce the impact of specific risks."]
["Effectiveness Factor","Qualification Criteria",null,"Rating"]
["Very Good","Risk exposure is effectively controlled and managed ",null,{"v":0.2,"d":"20%"}]
["Good","Majority of risk exposure is effectively controlled and managed",null,{"v":0.4,"d":"40%"}]
["Satisfactory","There is room for some improvement",null,{"v":0.65,"d":"65%"}]
["Weak","Some of the risk exposure appears to be controlled, but there are major deficiencies",null,{"v":0.8,"d":"80%"}]
["Unsatisfactory","Control measures are ineffective",null,{"v":0.9,"d":"90%"}]
[]
["Level of Inherent Risk",null,null,"Level of Residual Risk"]
["The table below indicates the level of Inherent risk of each specific risk identified and rated.",null,null,"The table below indicates the level of Residual risk of each specific risk identified and rated."]
["Inherent Risk ","Rating",null,"Residual Risk ","Rating"]
["Extreme","³ 50",null,"Priority 1","³ 20"]
["High","³ 30 < 50",50,"Priority 2","³ 10 < 20",20]
["Moderate","³ 20 < 30",30,"Priority 3","³ 5 < 10",10]
["Low","³ 10 < 20",20,"Priority 4","³ 2.5 < 5",5]
["Insignificant","< 10",10,"Priority 5","< 2.5",2.5]
[]
[]
[]
[]
[]
["Inherent - impact * likelihood",10,20,40,60,100]
[90,{"$f":"B$60*$A61/100","v":9},18,36,54,90]
[60,6,12,24,36,60]
[40,4,8,16,24,40]
[20,2,4,8,12,20]
[10,1,2,4,6,10]
[]
["Residual - Very Good",10,20,40,60,100]
[{"$f":"90*0.2","v":18},{"$f":"B$60*$A68/100","v":1.8},3.6,7.2,10.8,18]
[{"$f":"60*0.2","v":12},1.2,2.4,4.8,7.2,12]
[{"$f":"40*0.2","v":8},0.8,1.6,3.2,4.8,8]
[{"$f":"20*0.2","v":4},0.4,0.8,1.6,2.4,4]
[{"$f":"10*0.2","v":2},0.2,0.4,0.8,1.2,2]
[]
["Residual - Good",10,20,40,60,100]
[{"$f":"90*0.4","v":36},{"$f":"B$60*$A75/100","v":3.6},7.2,14.4,21.6,36]
[{"$f":"60*0.4","v":24},2.4,4.8,9.6,14.4,24]
[{"$f":"40*0.4","v":16},1.6,3.2,6.4,9.6,16]
[{"$f":"20*0.4","v":8},0.8,1.6,3.2,4.8,8]
[{"$f":"10*0.4","v":4},0.4,0.8,1.6,2.4,4]
[]
["Residual - Satisfactory",10,20,40,60,100]
[{"$f":"90*0.65","v":58.5},{"$f":"B$60*$A82/100","v":5.85},11.7,23.4,35.1,58.5]
[{"$f":"60*0.65","v":39},3.9,7.8,15.6,23.4,39]
[{"$f":"40*0.65","v":26},2.6,5.2,10.4,15.6,26]
[{"$f":"20*0.65","v":13},1.3,2.6,5.2,7.8,13]
[{"$f":"10*0.65","v":6.5},0.65,1.3,2.6,3.9,6.5]
[]
["Residual - Weak",10,20,40,60,100]
[{"$f":"90*0.8","v":72},{"$f":"B$60*$A89/100","v":7.2},14.4,28.8,43.2,72]
[{"$f":"60*0.8","v":48},4.8,9.6,19.2,28.8,48]
[{"$f":"40*0.8","v":32},3.2,6.4,12.8,19.2,32]
[{"$f":"20*0.8","v":16},1.6,3.2,6.4,9.6,16]
[{"$f":"10*0.8","v":8},0.8,1.6,3.2,4.8,8]
[]
["Residual - Unsatisfactory",10,20,40,60,100]
[{"$f":"90*0.9","v":81},{"$f":"B$60*$A96/100","v":8.1},16.2,32.4,48.6,81]
[{"$f":"60*0.9","v":54},5.4,10.8,21.6,32.4,54]
[{"$f":"40*0.9","v":36},3.6,7.2,14.4,21.6,36]
[{"$f":"20*0.9","v":18},1.8,3.6,7.2,10.8,18]
[{"$f":"10*0.9","v":9},0.9,1.8,3.6,5.4,9]

{"sheet":"Inherent Risk Register","index":5,"n_rows":154,"n_cols":20,"rows_kept":154,"merged":[[6,0,7,0],[6,1,7,1],[6,2,7,2],[6,3,7,3],[6,4,7,4],[6,8,7,8],[6,9,7,9],[6,10,7,10],[6,11,7,11],[6,12,7,12],[6,13,7,13],[6,14,7,14],[6,15,7,15],[6,16,7,16],[6,17,7,17],[6,18,7,18],[6,19,7,19],[7,5,7,7]]}
[null,{"$f":"Beginning!$G$1","v":"Company Name"}]
[null,{"$f":"Beginning!$G$2","v":"Enterprise Risk Management"}]
[null,{"$f":"Beginning!$G$3","v":"Overall Risk Assessment"}]
[null,{"$f":"Beginning!$G$4","v":"Risk register as at Date"}]
[null,"Inherent Risk Register"]
[]
["Risk number","Risk Area","Risk","Description","Consequence of the risk","Impact\n",null,"Likelihood\n",null,"Inherent risk exposure",null,"Current controls","Perceived Control Effectiveness",null,"Residual risk exposure",null,"Risk owner","Actions to improve management of the risk through discussions during risk workshop","Action owner","Due date"]
[{"$nulls":5},"No Controls"]
[1]
[2]
[3]
[4]
[5]
[6]
[7]
[8]
[9]
[10]
[11]
[12]
[13]
[14]
[15]
[16]
[17]
[18]
[19]
[20]
[21]
[22]
[23]
[24]
[]
[null,"Risk Area"]
[1,"Information Management"]
[2,"Financial Management"]
[3,"Human Resources"]
[4,"Operational"]
[5,"Governance"]
[6,"Compliance"]
[7,"Integrity"]
[8,"External Risks"]
[9]
[10]
[]
[null,"Information Management "]
[1,"Management Info. System"]
[2,"Dependence on IT"]
[3,"Reliability"]
[4,"External IT"]
[5,"Access/ availability"]
[6,"Completeness/ Assurance"]
[7,"Relevance"]
[8,"Sufficiency"]
[9,"Intellectual Property"]
[]
[null,"Financial Management "]
[1,"Budgeting & Planning"]
[2,"Cash Flow"]
[3,"Investment Evaluation"]
[4,"Financial Reporting"]
[5,"Financial Instruments"]
[6,"Funding"]
[7,"Accounting Information"]
[8,"Cost Control"]
[9,"Revenue"]
[10,"Fixed Assets"]
[11,"Treasury"]
[12,"Rebates/Discounts"]
[13,"Creditors"]
[14,"Masterfile maintenance"]
[15,"Stock & Manufacturing"]
[16,"Provision & Accruals"]
[17,"Payroll"]
[18,"Financial Statement Close Process"]
[]
[null,"Human resources"]
[1,"HR Management"]
[2,"Competencies"]
[3,"Recruitment"]
[4,"Recognition/ Retention/ Compensation"]
[5,"Performance Management"]
[6,"Leadership Development"]
[7,"Training"]
[8,"Terminations"]
[]
[null,"Operational "]
[1,"Technology"]
[2,"Quality"]
[3,"Customer Satisfaction"]
[4,"Customer Acceptance/ Credit"]
[5,"Obsolescence"]
[6,"Shrinkage"]
[7,"Efficiency"]
[8,"Capacity"]
[9,"Pricing"]
[10,"Cycle Time"]
[11,"Sourcing"]
[12,"Product development & Life Cycle Mgmt"]
[13,"Product Failure"]
[14,"Business Interruption"]
[15,"Strategic Alliances"]
[16,"Contracting"]
[17,"Performance Measures"]
[18,"Health and Safety"]
[19,"Trademarks/ Branding"]
[20,"Marketing"]
[21,"Repair & Maintenance"]
[22,"Security Systems"]
[23,"Acquisition Integration"]
[24]
[]
[null,"Governance"]
[1,"Authority"]
[2,"Leadership"]
[3,"Performance incentives"]
[4,"Limits"]
[5,"Strategic"]
[]
[null,"Integrity "]
[1,"Management Fraud"]
[2,"Employee Fraud"]
[3,"Illegal Acts"]
[4,"Unauthorized Use"]
[5,"Reputation",{"$nulls":3},"IMPACT LIST",null,"PROB LIST",null,"IR LIST",null,null,"CE LIST",null,"RR LIST"]
[{"$nulls":5},"NA",null,"NA",null,"NA",null,null,"NA",null,"NA"]
[{"$nulls":5},{"$f":"'Assessment Tables'!F$11","v":"Catastrophic"},null,{"$f":"'Assessment Tables'!A$32","v":"Almost Certain"},null,{"$f":"'Assessment Tables'!A$50","v":"Extreme"},null,null,{"$f":"'Assessment Tables'!A41","v":"Very Good"},null,{"$f":"'Assessment Tables'!D50","v":"Priority 1"}]
[{"$nulls":5},{"$f":"'Assessment Tables'!E$11","v":"Critical"},null,{"$f":"'Assessment Tables'!A$33","v":"Likely"},null,{"$f":"'Assessment Tables'!A$51","v":"High"},null,null,{"$f":"'Assessment Tables'!A42","v":"Good"},null,{"$f":"'Assessment Tables'!D51","v":"Priority 2"}]
[{"$nulls":5},{"$f":"'Assessment Tables'!D$11","v":"Serious"},null,{"$f":"'Assessment Tables'!A$34","v":"Possible"},null,{"$f":"'Assessment Tables'!A$52","v":"Moderate"},null,null,{"$f":"'Assessment Tables'!A43","v":"Satisfactory"},null,{"$f":"'Assessment Tables'!D52","v":"Priority 3"}]
[{"$nulls":5},"Important",null,{"$f":"'Assessment Tables'!A$35","v":"Unlikely"},null,{"$f":"'Assessment Tables'!A$53","v":"Low"},null,null,{"$f":"'Assessment Tables'!A44","v":"Weak"},null,{"$f":"'Assessment Tables'!D53","v":"Priority 4"}]
[{"$nulls":5},{"$f":"'Assessment Tables'!B$11","v":"Minor"},null,{"$f":"'Assessment Tables'!A$36","v":"Rare"},null,{"$f":"'Assessment Tables'!A$54","v":"Insignificant"},null,null,{"$f":"'Assessment Tables'!A45","v":"Unsatisfactory"},null,{"$f":"'Assessment Tables'!D54","v":"Priority 5"}]
[]
[null,"Compliance "]
[1,"Taxation"]
[2,"Environmental"]
[3,"Health and safety"]
[4,"Legal"]
[5,"Regulatory"]
[]
[null,"External Risks"]
[1,"Legal (regulation, legislation, etc)"]
[2,"Economic (interest rates, currencies, inflation, GDP, unemployment, etc)"]
[3,"Social (trends, values,  population growth, consumer psychology, etc)"]
[4,"Technology"]
[5,"New entrants"]
[6,"Suppliers"]
[7,"Substitutes"]
[8,"Competition"]
[9,"Capital Markets"]
[10,"Political"]
[11,"Disasters"]
[12,"Rating Agencies"]
[13,"Terrorism"]
[14,"Product failure"]

{"sheet":"Inherent vs Residual graph","index":6,"n_rows":48,"n_cols":2,"rows_kept":48}
[]
[{"$f":"Beginning!G1","v":"Company Name"}]
[{"$f":"Index!A3","v":"Enterprise Risk Management"}]
[{"$f":"Index!A4","v":"Overall Risk Assessment"}]
[{"$f":"Index!A5","v":"Risk register as at Date"}]
{"$rows_empty":37}
[null,"Note: Risk numbers refer to the risks on the inherent risk register"]
[]
[null,"Inherent risks (in red) represent the product of the impact and the likelihood of the risk occurring measured as a risk value.  "]
[null,"The residual risk (in green) is the product of the inherent risk and perceived control effectiveness measured as a risk value. "]
[null,"The greater the gap between the Inherent and Residual risk the more effective the controls mitigating the risks are. "]
[null,"Management should concentrate on controlling high inherent risks, especially those with a low control effectiveness."]

{"sheet":"Summary","index":7,"n_rows":39,"n_cols":5,"rows_kept":39,"merged":[[0,0,0,4],[2,0,2,4],[3,0,3,4],[4,0,4,4],[5,0,5,4],[12,0,12,4],[21,0,21,4],[23,0,23,4],[25,0,25,4],[34,0,34,4]]}
["Risk Register Summary"]
[]
["Risks requiring positive assurance from Internal Audit"]
[]
["Internal Audit will consider auditing the process surrounding those risks with a high inherent risk and an associated low residual risk as a result of strong controls. For those risks with strong controls as perceived by management, Internal Audit will provide management with the assurance for these controls through formalised test procedures.\n\nThe graph depicting inherent risk versus residual risk highlights the following risk areas and associated risks as a possible focus for Internal Audit.\n\nThe risks in the table below have been ranked in the order that will be most beneficial to provide management with positive assurance that controls are operating as intended by management.\n\nIn consultation with management, one or more of the above focus areas may be selected for Internal Audit review"]
["Risks requiring positive assurance from Internal Audit"]
["Ranking","Risk number","Risk Area","Risk","Description"]
[1]
[2]
[3]
[4]
[5]
["Risks requiring positive assurance from Internal Audit"]
["Ranking","Risk number","Risk Area","Risk","Description"]
[6]
[7]
[8]
[9]
[10]
[]
[]
["Residual risk exposure exceeding acceptable value"]
[]
["The risks in the table below have been ranked in order of residual risk exposure, these are rated as a first priority for management as their residual risk values exceed the acceptable value.\n\nManagement should consider reviewing the controls surrounding these processes."]
[]
["Residual risk exposure exceeding acceptable value"]
["Ranking","Risk number","Risk Area","Risk","Description"]
[1]
[2]
[3]
[4]
[5]
[6]
[7]
["Residual risk exposure exceeding acceptable value"]
["Ranking","Risk number","Risk Area","Risk","Description"]
[8]
[9]
[10]

{"sheet":"Top 10","index":8,"n_rows":156,"n_cols":21,"rows_kept":156,"merged":[[6,0,7,0],[6,1,7,1],[6,2,7,2],[6,3,7,3],[6,4,7,4],[6,8,7,8],[6,9,7,9],[6,10,7,10],[6,11,7,11],[6,12,7,12],[6,13,7,13],[6,14,7,14],[6,15,7,15],[6,16,7,16],[6,17,7,17],[6,18,7,18],[6,19,7,19],[6,20,7,20],[7,5,7,7]]}
[null,{"$f":"Beginning!$G$1","v":"Company Name"}]
[null,{"$f":"Beginning!$G$2","v":"Enterprise Risk Management"}]
[null,{"$f":"Beginning!$G$3","v":"Overall Risk Assessment"}]
[null,{"$f":"Beginning!$G$4","v":"Risk register as at Date"}]
[null,"Inherent Risk Register"]
[]
["Risk number","Risk Area","Risk","Description","Consequence of the risk","Impact\n",null,"Likelihood\n",null,"Inherent risk exposure",null,"Current controls","Perceived Control Effectiveness",null,"Residual risk exposure",null,"Risk owner","Actions to improve management of the risk through discussions with management","Action owner","Due date"]
[{"$nulls":5},"No Controls"]
[{"$nulls":20},{"$f":"K9-P9","v":{"v":0,"d":"0 "}}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[{"$nulls":20},{"v":0,"d":"0 "}]
[]
[null,"Risk Area"]
[1,"Information Management"]
[2,"Financial Management"]
[3,"Human Resources"]
[4,"Operational"]
[5,"Governance"]
[6,"Compliance"]
[7,"Integrity"]
[8,"External Risks"]
[9]
[10]
[]
[null,"Information Management "]
[1,"Management Info. System"]
[2,"Dependence on IT"]
[3,"Reliability"]
[4,"External IT"]
[5,"Access/ availability"]
[6,"Completeness/ Assurance"]
[7,"Relevance"]
[8,"Sufficiency"]
[]
[null,"Financial Management "]
[1,"Budgeting & Planning"]
[2,"Cash Flow"]
[3,"Investment Evaluation"]
[4,"Financial Reporting"]
[5,"Financial Instruments"]
[6,"Funding"]
[7,"Accounting Information"]
[8,"Cost Control"]
[9,"Revenue"]
[10,"Property, Plant & Equipment"]
[11,"Treasury"]
[]
[1,"Human resources"]
[2,"HR Management"]
[3,"Competencies"]
[4,"Recruitment"]
[5,"Recognition/ Retention/ Compensation"]
[6,"Performance Management"]
[7,"Leadership Development"]
[null,"Training"]
[]
[]
[1,"Operational "]
[2,"Technology"]
[3,"Quality"]
[4,"Customer"]
[5,"Satisfaction"]
[6,"Customer Acceptance/ Credit"]
[7,"Obsolescence"]
[8,"Shrinkage"]
[9,"Efficiency"]
[10,"Capacity"]
[11,"Pricing"]
[12,"Cycle Time"]
[13,"Sourcing"]
[14,"Product development & Life Cycle Mgmt"]
[15,"Product Failure"]
[16,"Business Interruption"]
[17,"Strategic Alliances"]
[18,"Contracting"]
[19,"Performance Measures"]
[20,"Health and Safety"]
[21,"Trademarks/ Branding"]
[22,"Marketing"]
[23,"Repair & Maintenance"]
[24,"Security Systems"]
[null,"Acquisition Integration"]
[]
[1,"Governance"]
[2,"Authority"]
[3,"Leadership"]
[4,"Performance incentives"]
[5,"Limits"]
[null,"Strategic"]
[]
[1,"Integrity "]
[2,"Management Fraud"]
[3,"Employee Fraud"]
[4,"Illegal Acts"]
[5,"Unauthorized Use"]
[null,"Reputation",{"$nulls":3},"IMPACT LIST",null,"PROB LIST",null,"IR LIST",null,null,"CE LIST",null,"RR LIST"]
[{"$nulls":5},"NA",null,"NA",null,"NA",null,null,"NA",null,"NA"]
[{"$nulls":5},{"$f":"'Assessment Tables'!F$11","v":"Catastrophic"},null,{"$f":"'Assessment Tables'!A$32","v":"Almost Certain"},null,{"$f":"'Assessment Tables'!A$50","v":"Extreme"},null,null,{"$f":"'Assessment Tables'!A41","v":"Very Good"},null,{"$f":"'Assessment Tables'!D50","v":"Priority 1"}]
[{"$nulls":5},{"$f":"'Assessment Tables'!E$11","v":"Critical"},null,{"$f":"'Assessment Tables'!A$33","v":"Likely"},null,{"$f":"'Assessment Tables'!A$51","v":"High"},null,null,{"$f":"'Assessment Tables'!A42","v":"Good"},null,{"$f":"'Assessment Tables'!D51","v":"Priority 2"}]
[{"$nulls":5},{"$f":"'Assessment Tables'!D$11","v":"Serious"},null,{"$f":"'Assessment Tables'!A$34","v":"Possible"},null,{"$f":"'Assessment Tables'!A$52","v":"Moderate"},null,null,{"$f":"'Assessment Tables'!A43","v":"Satisfactory"},null,{"$f":"'Assessment Tables'!D52","v":"Priority 3"}]
[{"$nulls":5},{"$f":"'Assessment Tables'!C$11","v":"Important"},null,{"$f":"'Assessment Tables'!A$35","v":"Unlikely"},null,{"$f":"'Assessment Tables'!A$53","v":"Low"},null,null,{"$f":"'Assessment Tables'!A44","v":"Weak"},null,{"$f":"'Assessment Tables'!D53","v":"Priority 4"}]
[{"$nulls":5},{"$f":"'Assessment Tables'!B$11","v":"Minor"},null,{"$f":"'Assessment Tables'!A$36","v":"Rare"},null,{"$f":"'Assessment Tables'!A$54","v":"Insignificant"},null,null,{"$f":"'Assessment Tables'!A45","v":"Unsatisfactory"},null,{"$f":"'Assessment Tables'!D54","v":"Priority 5"}]
[]
[1,"Compliance "]
[2,"Taxation"]
[3,"Environmental"]
[4,"Health and safety"]
[5,"Legal"]
[null,"Regulatory"]
[]
[1,"External Risks"]
[2,"Legal (regulation, legislation, etc)"]
[3,"Economic (interest rates, currencies, inflation, GDP, unemployment, etc)"]
[4,"Social (trends, values,  population growth, consumer psychology, etc)"]
[5,"Technology"]
[6,"New entrants"]
[7,"Suppliers"]
[8,"Substitutes"]
[9,"Competition"]
[10,"Capital Markets"]
[11,"Political"]
[12,"Disasters"]
[13,"Rating Agencies"]
[null,"Terrorism"]